Adding tests for experimental Safe DOM creation technique.

tests/html/safe_dom_test.dart

+library safe_dom_test;
+
+import 'dart:async';
+import 'dart:html';
+import '../../pkg/unittest/lib/unittest.dart';
+import '../../pkg/unittest/lib/html_config.dart';
+
+main() {
+  useHtmlConfiguration();
+
+  // Checks to see if any illegal properties were set via script.
+  var checkerScript = '''
+  window.addEventListener('message', function(e) {
+    if (e.data == 'check_unsafe') {
+      if (window.unsafe_value) {
+        window.postMessage('unsafe_check_failed', '*');
+      } else {
+        window.postMessage('unsafe_check_passed', '*');
+      }
+      //window.alert('checking!');
+    }
+  }, false);
+  ''';
+
+  var script = new ScriptElement();
+  script.text = checkerScript;
+  document.body.append(script);
+
+  var unsafeString =
+      '<img src="_.png" onerror="javascript:window.unsafe_value=1;" crap="1"/>';
+
+  test('Safe DOM', () {
+    var fragment = createContextualFragment(unsafeString);
+
+    return isSafe().then((value) {

[Jennifer Messerly, 2013/05/06 23:28:52]

Can you "expect" a future? e.g.

expect(isSafe(), completion(true), reason: 'Expected unsafe code executed.');

[blois, 2013/05/07 00:43:08]

Yes! Never used that construct before :)

+      expect(value, isTrue, reason: 'Expected unsafe code executed.');

[Jennifer Messerly, 2013/05/06 23:28:52]

the "reason" here is backwards? we expected the code is safe, (not executed)

[blois, 2013/05/07 00:43:08]

Done.

+    });
+
+    return ensureSafe();

[Jennifer Messerly, 2013/05/06 23:28:52]

this looks like dead code

[blois, 2013/05/07 00:43:08]

Done.

+  });
+
+  // Make sure that scripts did get executed, so we know our detection works.
+  test('Unsafe Execution', () {
+    var div = new DivElement();
+    div.innerHtml = unsafeString;

[Jennifer Messerly, 2013/05/06 23:28:52]

this is going to need to change if innerHtml is removed? :)

[blois, 2013/05/07 00:43:08]

Yeah, this would just use createContextualFragment with a null validator.

But I just tried that, and it's crashing DRT :/

I guess that's why it's good to get testing on all platforms!

+
+    return isSafe().then((value) {
+      expect(value, isFalse, reason: 'Expected unsafe code did not execute.');
+    });
+  });
+
+  test('Validity', () {
+    var fragment = createContextualFragment('<span>content</span>');

[Jennifer Messerly, 2013/05/06 23:28:52]

it might be interesting to run it through our existing "new Element.html" tests.
perhaps that makes sense to do once it is changed to use
createContextualFragment under the covers.

[blois, 2013/05/07 00:43:08]

Yep, this is primarily to make sure that the parsing is safe and works
everywhere.

+    var div = new DivElement();
+    div.append(fragment);
+
+    expect(div.nodes.length, 1);
+    expect(div.nodes[0] is SpanElement, isTrue);
+  });
+}
+
+DocumentFragment createContextualFragment(String html, [String contextTag]) {
+  var doc = document.implementation.createHtmlDocument('');
+
+  var contextElement;
+  if (contextTag != null) {
+    contextElement = doc.$dom_createElement(contextTag);
+  } else {
+    contextElement = doc.body;
+  }
+
+  if (Range.supportsCreateContextualFragment) {
+    var range = doc.$dom_createRange();
+    range.selectNode(contextElement);
+    return range.createContextualFragment(html);
+  } else {
+    contextElement.innerHtml = html;
+    var fragment = new DocumentFragment();;
+    while (contextElement.$dom_firstChild != null) {
+      fragment.append(contextElement.$dom_firstChild);
+    }
+    return fragment;
+  }
+}
+
+// Delay to wait for the image load to fail.
+const Duration imageLoadDelay = const Duration(seconds: .5);
+
+Future<bool> isSafe() {
+  return new Future.delayed(imageLoadDelay).then((_) {
+    window.postMessage('check_unsafe', '*');
+  }).then((_) {
+    return window.onMessage.where(
+        (e) => e.data.startsWith('unsafe_check')).first;
+  }).then((e) {
+    return e.data == 'unsafe_check_passed';
+  });
+}